Could I qurantine the message if attachment tests do not pass

[Valentin Laskov]

Hi,

In

/etc/MailScanner/filename.rules.conf and in
/etc/MailScanner/archives.filename.rules.conf

I have

manager at festa.bg        \.rar$  Possible virus in archive. Restricted by 
Laskov
manager at festa.bg        \.r[0-9]{1,2}$  Possible virus in archive.      
Restricted by Laskov
manager at festa.bg        \.tar\.([b|g]z?2)$      Possible virus in 
archive.      Restricted by Laskov
manager at festa.bg        \.img$  Possible virus in archive. Restricted by 
Laskov

This forwards messages with such attachments to me for a manual review.

Regards
Valentin

На 4.05.20 г. в 11:20 ч., 微和的風 написа:
>
> Hi,
>
> I had set a rule for blocking some filenames.
>
> After the test of attachment, the attachments which are not allowed 
> had been removed, but the email had still been delivered to user with 
> no attachments.
>
> If I don’t want the user to receive the message before the 
> administrator has checked, could I qurantine the message if attachment 
> tests of Mailscanner do not pass ?
>
> Some settings of MailScanner.conf
>
> ==================================
>
> Filename Rules = %etc-dir%/filescan.rules
>
> Quarantine Whole Message = yes
>
> Quarantine Infections = yes
>
> ===================================
>
> Thanks in advance.
>
> zephyr
>
>
>
-- 
Поздрави!

Валентин Ласков
Системен администратор
"Феста Холдинг" АД
бул. "Вл. Варненчик" 48
9000 гр. Варна
тел.:   +359 52 669137
GSM: +359 888 669137
Fax:   +359 52 669110

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20200504/163b25bd/attachment.html>